jpalanco / alienvault-ossim Goto Github PK

I discovered the memory leak vulnerability on 1132th lines in file sim-organizer.c. The memory allocated the function sim_uuid_new() is not freed，before the function sim_event_unref (event) is called. As well as event->backlog_id is the member of the structure event. So when lots of alarm events occurs, increasing memory usage can cause system crash.

Every now and then (three times in total I believe) I get a database error when I login to the administrative web portal for OSSIM. When I login to the VM through Hyper-V Connect I get another error: OError: [Errno 28] No space left on device

And initially I just thought there was not enough hard drive space left, so I powered off the server, expanded the virtual hard drive, booted GParted live through the VM and added the space to the "/ partition". So the / partition was 100GB before and afterwards its 300GB.

Now comes the weird part, when I booted the VM after fixing the space issues, the machine booted with no errors, and I successfully logged in with no issues, I even could visit the administrative web portal that previously showed me the Operation was not completed due to a database error.

And then I tried to update the server and after that reboot the server started again with the errors of OError: [Errno 28] No space left on device. Even though when I run sudo df, I can clearly see that the hard drive has free space!

I'm currently only able to login to the VM through Hyper-V Connect and then Jailbreak, no access at all to administrative web portal.

What is the issue here? Have anyone else encountered this issue when the VM drive becomes full and you try to expand it?

https://michaelellerbeck.com/2015/07/29/alienvault-ossim-operation-was-not-completed-due-to-a-database-error/

[DATABASE ERROR] [redacted] Field 'version' doesn't have a default value called in /ossim/sensor/newsensor.php and defined in /usr/share/ossim/www/sensor/newsensor.php on line 228 (save_in_db)

Steps to recreate:
Configuration -> Deployment
Sensors -> New

Create a dummy sensor, filling in all fields.
Save

Version 5.8.9

Buenas José Ramón, estoy intentando utilizar el script getepo.py para extaer los eventos de la base de datos de la ePO de McAfee, pero cuando ejecuto el script añadiendo los datos (IP:Puerto, User, Password y BBDD), me salta el siguiente error:

print pid of new proc:5007
getEpo.py process didn't existed before this one, continue
Traceback (most recent call last):
File "getepo.py", line 83, in
cVal = getFirstID()
File "getepo.py", line 57, in getFirstID
cVal = int(row[1])
TypeError: 'NoneType' object has no attribute 'getitem'

¿Podrías indicarme como puedo solucionarlo?

Gracias.

Please How do you begin installation from source

Thank You